Description
Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long comment in a torrent file.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/16634
exploitdb
WORKING POC
VERIFIED
by Carsten Eiram · textlocalwindows
https://www.exploit-db.com/exploits/10009
metasploit
WORKING POC
GOOD
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/fdm_torrent.rb
References (5)
Scores
EPSS
0.6569
EPSS Percentile
98.5%
Details
CWE
CWE-119
Status
published
Products (2)
free_download_manager/free_download_manager
2.5
free_download_manager/free_download_manager
3.0
Published
Feb 03, 2009
Tracked Since
Feb 18, 2026